Trust & Privacy

This page is maintained by NoorStudio to answer common security and privacy questions. It describes current practices, not independent verification or legal certification.

Access & Authentication

NoorStudio uses email-based and social authentication through a managed identity provider. Accounts are required to generate content. We do not support password-only access; sign-in links and OAuth providers are used instead.

You are responsible for keeping your sign-in credentials and device access secure.

Platform & Hosting

NoorStudio is built and hosted on the Lovable platform, which deploys to a global edge network. The application runs in a serverless environment, and the database is hosted on a managed PostgreSQL service with encryption at rest.

Platform-level security (infrastructure patches, network isolation, and edge protection) is handled by the hosting provider. Application-level security (access controls, data handling, and content policies) is handled by NoorStudio.

Data Collection & Use

We collect only the data needed to run the service:

  • Account information (email address) for authentication and billing status.
  • Content generation inputs (topics, style preferences, language choices) to produce scripts, hooks, titles, and hashtags.
  • Generated outputs are stored so you can revisit your history.

We do not sell your data. We do not use your inputs or outputs to train public AI models. Content generation is handled through a managed AI gateway; prompts and outputs are processed according to the gateway provider's terms.

Subprocessors & Integrations

NoorStudio relies on a small set of managed services:

  • Managed identity and database provider (authentication and data storage).
  • Managed AI gateway (content generation).
  • Edge hosting platform (application delivery).

Cookies & Analytics

NoorStudio does not use third-party analytics or advertising cookies. Essential cookies and local storage tokens are used strictly for authentication and session management.

Retention & Deletion

Generated content and account data are retained while your account is active. If you request account deletion, your data is removed immediately. We do not keep backups of deleted user content beyond standard infrastructure snapshots, which are purged on the provider's schedule.

Privacy Requests & Account Deletion

To request a copy of your data, correct your information, or delete your account, email us at hanzalatauheed007@gmail.com. We aim to respond within a few business days.

Security Contact & Vulnerability Reporting

If you discover a security issue, please report it responsibly to hanzalatauheed007@gmail.com. Do not disclose vulnerabilities publicly before we have had a chance to address them.

This page reflects current practices and may be updated as the service evolves. If you have questions not covered here, reach out at hanzalatauheed007@gmail.com.